~ubuntu-branches/ubuntu/karmic/texlive-bin/karmic-updates

« back to all changes in this revision

Viewing changes to debian/changelog

  • Committer: Bazaar Package Importer
  • Author(s): Marc Deslauriers
  • Date: 2010-05-03 09:12:05 UTC
  • Revision ID: james.westby@ubuntu.com-20100503091205-2nsfybeo8pgafv4e
Tags: 2007.dfsg.2-7ubuntu1.1
* SECURITY UPDATE: denial of service via buffer overflow
  - debian/patches/security-CVE-2009-1284.patch: check for pool overflow
    in build/source/texk/web2c/bibtex.ch.
  - CVE-2009-1284
* SECURITY UPDATE: arbitrary code execution via memory corruption
  (LP: #537103)
  - debian/patches/security-CVE-2010-0827.patch: make sure name isn't
    too long in build/source/texk/dvipsk/virtualfont.c.
  - CVE-2010-0827
* SECURITY UPDATE: arbitrary code execution via integer overflow
  - debian/patches/security-CVE-2010-0739,1440.patch: make sure numbytes
    doesn't overflow in build/source/texk/dvipsk/dospecial.c.
  - CVE-2010-0739
  - CVE-2010-1440

Show diffs side-by-side

added added

removed removed

Lines of Context:
 
1
texlive-bin (2007.dfsg.2-7ubuntu1.1) karmic-security; urgency=low
 
2
 
 
3
  * SECURITY UPDATE: denial of service via buffer overflow
 
4
    - debian/patches/security-CVE-2009-1284.patch: check for pool overflow
 
5
      in build/source/texk/web2c/bibtex.ch.
 
6
    - CVE-2009-1284
 
7
  * SECURITY UPDATE: arbitrary code execution via memory corruption
 
8
    (LP: #537103)
 
9
    - debian/patches/security-CVE-2010-0827.patch: make sure name isn't
 
10
      too long in build/source/texk/dvipsk/virtualfont.c.
 
11
    - CVE-2010-0827
 
12
  * SECURITY UPDATE: arbitrary code execution via integer overflow
 
13
    - debian/patches/security-CVE-2010-0739,1440.patch: make sure numbytes
 
14
      doesn't overflow in build/source/texk/dvipsk/dospecial.c.
 
15
    - CVE-2010-0739
 
16
    - CVE-2010-1440
 
17
 
 
18
 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Mon, 03 May 2010 09:12:05 -0400
 
19
 
1
20
texlive-bin (2007.dfsg.2-7ubuntu1) karmic; urgency=low
2
21
 
3
22
  * Merge from Debian unstable, remaining changes: (LP: #438092)